Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
File: R-7_wnFGJLkjfa3lP70kQfQZKsc.mft (raw, json)
Hash identifier: touObpd38ztahIINU+7841RvOwUwSrK+HkdcXXenLcQ=
Subject key identifier: 17:80:F0:9C:D9:E1:34:4B:C5:1C:90:A5:EE:1E:4E:86:B4:CB:89:F8
Authority key identifier: 47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7
Certificate issuer: /CN=47eeffc2714624b9237dade53fbd2441f4192ac7
Certificate serial: 01988B4555D9B7C91E6CDC86B91F6DA8EF8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
Manifest number: 05C0
Signing time: Fri 08 Aug 2025 20:00:33 +0000
Manifest this update: Fri 08 Aug 2025 20:00:33 +0000
Manifest next update: Sat 09 Aug 2025 20:00:33 +0000
Files and hashes: 1: R-7_wnFGJLkjfa3lP70kQfQZKsc.crl (hash: j9VbzqfCSymbL/1DHk0nPOsotfB2ijjDP5+zesoJOK0=)
2: b0DuHL5Cx5oz0wmVPh9cLl0pYOs.roa (hash: 0vfXcmcuR2v9A+x1r5OGZhYbvc69ht+h4cnEKv+PZSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:55:d9:b7:c9:1e:6c:dc:86:b9:1f:6d:a8:ef:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47eeffc2714624b9237dade53fbd2441f4192ac7
Validity
Not Before: Aug 8 20:00:33 2025 GMT
Not After : Aug 9 20:00:33 2025 GMT
Subject: CN=1780f09cd9e1344bc51c90a5ee1e4e86b4cb89f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c9:b6:a1:30:38:89:84:40:f0:2d:a0:b3:91:
1d:41:83:50:29:1e:17:55:62:d0:19:ac:6c:fb:03:
2d:5c:57:15:e0:21:76:7d:e6:9d:50:a9:95:86:14:
c2:40:da:ba:0f:a8:bd:5e:b5:65:91:fa:97:b9:4e:
d6:42:54:65:2a:7f:0c:93:e5:e6:b5:be:f5:20:76:
68:ef:45:82:cd:d2:97:82:fa:2a:36:32:55:31:68:
54:3e:da:83:8e:f5:ad:1c:88:ef:55:2f:6b:c1:6c:
8a:ba:7b:c9:7e:10:30:9f:3e:d0:ff:db:89:55:7c:
d1:35:a8:8d:5b:06:08:15:7f:aa:ea:c8:4a:cd:8e:
fd:62:cd:6f:1e:65:41:56:cc:b9:84:54:9e:b8:c8:
02:a6:0c:f9:d5:6b:9e:65:46:db:87:41:48:79:8d:
c1:b2:ed:83:d8:be:ca:8b:18:59:85:e2:29:be:6b:
d3:57:19:7e:85:40:9e:37:07:10:5a:0d:1a:af:ef:
30:20:96:a1:61:c5:4f:30:c7:d3:33:0d:ab:90:04:
9b:f7:86:7f:90:52:a3:7c:e3:c8:b6:3b:aa:ce:79:
26:57:dc:50:67:71:6b:ff:b0:0e:16:44:09:56:af:
dc:cb:e5:62:d7:9d:af:61:36:b8:ba:89:ff:79:b1:
fd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:80:F0:9C:D9:E1:34:4B:C5:1C:90:A5:EE:1E:4E:86:B4:CB:89:F8
X509v3 Authority Key Identifier:
keyid:47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:79:77:9a:13:17:1f:7a:95:e4:dd:f9:e9:dd:73:72:6d:2d:
e3:83:49:d9:23:46:56:88:70:34:38:f5:5e:38:10:00:0e:bf:
ed:50:d1:e7:46:02:6b:bf:e0:94:d9:ce:26:68:14:61:37:4b:
0e:8e:19:65:e7:38:af:96:e9:88:65:a7:4c:0e:4e:1e:f5:fa:
a3:7e:76:f5:85:a9:ca:19:fc:25:4b:46:0b:63:7e:09:d2:d4:
1f:7f:07:64:c1:83:bf:f8:dc:35:05:8f:29:66:ad:6a:69:b8:
1c:64:da:60:75:7d:9b:29:8b:d9:60:e7:87:aa:af:b5:15:45:
cd:3c:38:7b:ab:2c:51:5c:92:dc:8d:cb:b4:91:87:57:61:82:
70:00:da:d0:27:de:67:2f:14:87:d7:06:75:2d:fc:24:7c:9c:
44:75:1e:fd:c4:3e:db:74:31:9e:6b:4f:82:7b:0e:21:d8:ce:
3e:4e:5c:c7:0b:81:2a:47:3b:34:24:f1:9c:bf:4f:3a:c0:30:
6a:62:2c:0f:ef:96:a7:73:0f:24:dc:f6:01:b4:77:dd:bb:c9:
3f:e6:05:b2:50:77:57:06:91:44:aa:60:a1:04:8c:d0:d3:fb:
9c:c5:9a:d6:98:93:02:d6:a9:51:33:ea:ce:24:89:f0:cc:ef:
87:54:37:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLRVXZt8kebNyGuR9tqO+PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZWVmZmMyNzE0NjI0YjkyMzdkYWRlNTNmYmQyNDQxZjQx
OTJhYzcwHhcNMjUwODA4MjAwMDMzWhcNMjUwODA5MjAwMDMzWjAzMTEwLwYDVQQD
EygxNzgwZjA5Y2Q5ZTEzNDRiYzUxYzkwYTVlZTFlNGU4NmI0Y2I4OWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAism2oTA4iYRA8C2gs5EdQYNQKR4X
VWLQGaxs+wMtXFcV4CF2feadUKmVhhTCQNq6D6i9XrVlkfqXuU7WQlRlKn8Mk+Xm
tb71IHZo70WCzdKXgvoqNjJVMWhUPtqDjvWtHIjvVS9rwWyKunvJfhAwnz7Q/9uJ
VXzRNaiNWwYIFX+q6shKzY79Ys1vHmVBVsy5hFSeuMgCpgz51WueZUbbh0FIeY3B
su2D2L7KixhZheIpvmvTVxl+hUCeNwcQWg0ar+8wIJahYcVPMMfTMw2rkASb94Z/
kFKjfOPItjuqznkmV9xQZ3Fr/7AOFkQJVq/cy+Vi152vYTa4uon/ebH9RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBeA8JzZ4TRLxRyQpe4eToa0y4n4MB8GA1UdIwQY
MBaAFEfu/8JxRiS5I32t5T+9JEH0GSrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUi03X3duRkdKTGtqZmEzbFA3MGtRZlFaS3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wODVhZTctOTlmOC00MTkwLWFhNTMt
ZDQ5OTIzYTE1ZmQ5LzEvUi03X3duRkdKTGtqZmEzbFA3MGtRZlFaS3NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wODVhZTctOTlmOC00MTkwLWFhNTMtZDQ5OTIzYTE1ZmQ5
LzEvUi03X3duRkdKTGtqZmEzbFA3MGtRZlFaS3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnl3mhMX
H3qV5N356d1zcm0t44NJ2SNGVohwNDj1XjgQAA6/7VDR50YCa7/glNnOJmgUYTdL
Do4ZZec4r5bpiGWnTA5OHvX6o3529YWpyhn8JUtGC2N+CdLUH38HZMGDv/jcNQWP
KWatamm4HGTaYHV9mymL2WDnh6qvtRVFzTw4e6ssUVyS3I3LtJGHV2GCcADa0Cfe
Zy8Uh9cGdS38JHycRHUe/cQ+23QxnmtPgnsOIdjOPk5cxwuBKkc7NCTxnL9POsAw
amIsD++Wp3MPJNz2AbR33bvJP+YFslB3VwaRRKpgoQSM0NP7nMWa1piTAtapUTPq
ziSJ8Mzvh1Q3IA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:14 2025 by rpki-client